Privacy Policy (Article 13 of the General Data Protection Regulation (GDPR))
The processing operations related to the website/portal’s web services take place at the aforementioned company’s headquarters and are handled only by technical personnel of the department authorized to process data (e.g., Internet Area), or by any external data processors (outsourcers) for occasional or periodic technical operations (e.g., database maintenance).
The aforementioned data controller considers the privacy of its users to be of fundamental importance and guarantees that the processing of personal data through its website is conducted in compliance with fundamental rights and freedoms, as well as the dignity of the data subject, with particular reference to confidentiality, personal identity, and the right to protection of personal data. In this regard, the data controller has adopted and implemented a Privacy Policy for all matters relating to the management of the website with regard to the processing of users’ personal data.
Please read the following Privacy Policy carefully and check it periodically for any updates or revisions that may be necessary. The data controller hereby informs you that the personal data (hereinafter “Data”) you provide, or otherwise acquired as a result of or during your browsing of our website/portal, may be processed in compliance with European Regulation 2016/679 (GDPR).
The data controller is:
Vertulo Turismo srl, Via Litorenea, 84047 Capaccio-Paestum
The legal representative of the company is Alessandro Vertullo, domiciled for the purposes of this office at Via Linora Litoranea – 84047 Capaccio-Paestum (SA)
Telephone: +39 0828811159
Email: villaggio@lidocascata.it
The data processing related to the website/portal’s web services takes place at the aforementioned company’s headquarters and is handled solely by the Administrator, or by any external parties (outsourcers) for the performance of occasional or periodic technical operations (e.g., database maintenance).
The data controller, as mentioned above, considers the privacy of its users to be of fundamental importance and guarantees that the processing of personal data through its website is conducted in compliance with fundamental rights and freedoms, as well as the dignity of the data subject, with particular reference to confidentiality, personal identity, and the right to protection of personal data. To this end, the data controller has adopted and implemented a Privacy Policy covering all aspects of the website’s management with regard to the processing of users’ personal data. This information is also provided pursuant to Article 13 of the “Personal Data Protection Code” (Legislative Decree No. 196/2003). Please read the following Privacy Policy and check it periodically for any updates or revisions that may be necessary. The data controller hereby informs you that the personal data (hereinafter “Data”) you provide, or otherwise acquired as a result of or during your browsing of our website/portal, may be processed in accordance with the Code.
Definition of “Personal Data”
For the purposes of this Policy, “personal data”—as further specified in Article 4 of the Code—means “any information relating to a natural person, legal person, entity, or association, identified or identifiable, even indirectly, by reference to any other information, including a personal identification number.”
This Privacy Policy applies to personal data collected through the Data Controller’s website and/or portal and/or the Company’s email accounts. It does not apply to personal data collected offline, except where such personal data is combined with other personal data collected by the Data Controller online. Furthermore, this Privacy Policy does not apply to other websites owned by third parties that can be accessed via hyperlinks, as the Data Controller does not manage or control the content of such sites.
The Data Controller may collect the following personal data through its website and/or portal: name, surname, address, email address, information collected for statistical purposes only during the browsing process of the website and/or portal, and other information voluntarily provided by the user through online registration procedures or by completing specific fields.
Forms, information designed to improve and facilitate site navigation.
Data Processing Methods
Users can access various sections of the website without providing any personal information. The Data Controller processes and collects personal data online through its website and/or portal or another Company email address. This processing is carried out, primarily automatically, in the following ways:
1) Data Voluntarily Provided by Users
The Data Controller collects personal information and other data entered in registration forms or provided in form fields on the website and/or portal, as well as forwarded to the Company by email. This data may include information necessary to provide the services requested by the data subject (e.g., newsletter) and/or to contact the data subject (name, postal address, email address, telephone number), as well as the user’s date of birth, professional credentials, hobbies, and interests.
2) Browsing data collected through the use of electronic tools
The computer systems and software procedures used to operate the Data Controller’s website acquire, during their normal use, a series of personal information whose transmission is implicit in the use of Internet communication protocols (for example, the user’s IP address or the domain name of the computer used to access the website, the URL of the requested resources, the time of the request or the duration of the session, the method used to submit the query to the server, the size of the files received in response to the request, the numerical code relating to the status of the response from the server, and other information regarding the user’s operating system and IT environment). The Data Controller’s website and/or web portal uses technologies such as cookies or similar to collect and/or transmit personal data of users. The Data Controller uses these technologies exclusively to obtain statistical information on the use of the website and/or web portal (e.g., total number of visitors to the sites, number of visitors per single web page, and the domain name of the visitors’ internet service provider). Specifically, the use of session cookies (those that are removed from the user’s computer when the browser is closed) is strictly limited to the transmission of information related to the user’s session, which is essential for safe and efficient navigation of the website and/or portal. Furthermore, the use of these session cookies strictly excludes the use of other IT techniques that could potentially compromise the privacy of users’ browsing and does not allow the acquisition of personal data identifying them.
Details on the processing of personal data
User data is collected to allow the Owner to provide its services, as well as for the following purposes: Statistics, Contacting the User, Interaction with social networks and external platforms, Registration and authentication, Social Applications, Payment management, Interaction with support and feedback platforms, Infrastructure monitoring, Traffic optimization and distribution, Interaction with live chat platforms, Remarketing and behavioral targeting, Address management and sending email messages, Displaying content from external platforms, Commercial affiliation, and Heat mapping. The types of Personal Data used for each purpose are indicated in the specific sections of this document.
SSL – TLS encryption
This site uses SSL – TLS encryption for security purposes and to protect the transmission of sensitive content, such as orders or requests sent to us as the site operator. You can recognize an encrypted connection by changing the browser’s address line from “http://” to “https://” and by the lock icon in the browser’s address bar.
Encrypted payments on this website
If, following the conclusion of a paid contract, you are required to provide us with your payment information (such as, for example, your account number for direct debit authorization), this information will be used for payment purposes.
Payment transactions using payment methods such as Visa, Mastercard, and direct debit are processed exclusively via an encrypted SSL/TLS connection. You can recognize an encrypted connection by the browser’s address line changing from “http://” to “https://” and the lock symbol in your browser line.
In the case of encrypted communications, the data
Forms, information designed to improve and facilitate site navigation.
Data Processing Methods
Users can access various sections of the website without providing any personal information. The Data Controller processes and collects personal data online through its website and/or portal or another Company email address. This processing is carried out, primarily automatically, in the following ways:
1) Data Voluntarily Provided by Users
The Data Controller collects personal information and other data entered in registration forms or provided in form fields on the website and/or portal, as well as forwarded to the Company by email. This data may include information necessary to provide the services requested by the data subject (e.g., newsletter) and/or to contact the data subject (name, postal address, email address, telephone number), as well as the user’s date of birth, professional credentials, hobbies, and interests.
2) Browsing data collected through the use of electronic tools
The computer systems and software procedures used to operate the Data Controller’s website acquire, during their normal use, a series of personal information whose transmission is implicit in the use of Internet communication protocols (for example, the user’s IP address or the domain name of the computer used to access the website, the URL of the requested resources, the time of the request or the duration of the session, the method used to submit the query to the server, the size of the files received in response to the request, the numerical code relating to the status of the response from the server, and other information regarding the user’s operating system and IT environment). The Data Controller’s website and/or web portal uses technologies such as cookies or similar to collect and/or transmit personal data of users. The Data Controller uses these technologies exclusively to obtain statistical information on the use of the website and/or web portal (e.g., total number of visitors to the sites, number of visitors per single web page, and the domain name of the visitors’ internet service provider). Specifically, the use of session cookies (those that are removed from the user’s computer when the browser is closed) is strictly limited to the transmission of information related to the user’s session, which is essential for safe and efficient navigation of the website and/or portal. Furthermore, the use of these session cookies strictly excludes the use of other IT techniques that could potentially compromise the privacy of users’ browsing and does not allow the acquisition of personal data identifying them.
Details on the processing of personal data
User data is collected to allow the Owner to provide its services, as well as for the following purposes: Statistics, Contacting the User, Interaction with social networks and external platforms, Registration and authentication, Social Applications, Payment management, Interaction with support and feedback platforms, Infrastructure monitoring, Traffic optimization and distribution, Interaction with live chat platforms, Remarketing and behavioral targeting, Address management and sending email messages, Displaying content from external platforms, Commercial affiliation, and Heat mapping. The types of Personal Data used for each purpose are indicated in the specific sections of this document.
SSL – TLS encryption
This site uses SSL – TLS encryption for security purposes and to protect the transmission of sensitive content, such as orders or requests sent to us as the site operator. You can recognize an encrypted connection by changing the browser’s address line from “http://” to “https://” and by the lock icon in the browser’s address bar.
Encrypted payments on this website
If, following the conclusion of a paid contract, you are required to provide us with your payment information (such as, for example, your account number for direct debit authorization), this information will be used for payment purposes.
Payment transactions using payment methods such as Visa, Mastercard, and direct debit are processed exclusively via an encrypted SSL/TLS connection. You can recognize an encrypted connection by the browser’s address line changing from “http://” to “https://” and the lock symbol in your browser line.
In the case of encrypted communications, the data
Data transmitted cannot be read by third parties. If SSL or TLS encryption is enabled, the transmitted data cannot be read by third parties.
Purposes of processing collected data
Personal data may be collected for the following purposes and using one or more of the following services:
SOCIAL MEDIA APPLICATIONS
These services allow the website and/or portal to access your social media profile data and interact with your posts. These services are not activated automatically but require explicit authorization from the user.
Twitter account access
This service allows the website and/or portal to connect with the user’s account on the Twitter social network, provided by Twitter Inc.
Personal data collected: Various types of data as specified in the service’s privacy policy.
Place of processing: USA – https://twitter.com/privacy?lang=it
Facebook account access
This service allows the site to connect with the User’s account on the Facebook social network, provided by Facebook Inc.
Facebook Permissions
The site may request certain Facebook permissions that allow it to perform actions with the User’s Facebook account and collect information, including Personal Data, from it.
For more information on the following permissions, please refer to the Facebook permissions documentation and the Facebook privacy policy. https://www.facebook.com/policy.php
The requested permissions are as follows:
Basic Information – The basic information of the User registered on Facebook, which typically includes the following Data: ID, name, image, gender, and localization language, and, in some cases, Facebook “Friends.” If the User has made additional Data publicly available, this will be available.
Email – Provides access to the user’s primary email address
Page Management – Allows the application to retrieve access tokens for the Pages and Applications the user manages.
Insights – Provides access to Insights data for pages, applications, and domains the user owns.
Permissions requested: Email, Page Management, and Insights.
Place of processing: USA – https://www.facebook.com/policy.php
Instagram Account Access
The site may request certain Instagram permissions that allow it to perform actions with the user’s Instagram account and collect information, including: information and content you provide, networks and connections, your usage, information about transactions made on our Products, activities performed and information provided by others about you, device information, and partner information.
For more information about permissions, please refer to the Instagram permissions documentation and the Instagram privacy policy, section “I. What types of information do we collect?” https://help.instagram.com/519522125107875
INTERACTION WITH SOCIAL NETWORKS AND EXTERNAL PLATFORMS
These services allow interaction with social networks, or other external platforms, directly from the site and/or portal. Interactions and information acquired from the site and/or portal are in any case subject to the User’s privacy settings for each social network. If a service for interaction with social networks is installed, it is possible that, even if Users do not use the service, it may collect traffic data relating to the pages on which it is installed.
Tweet button and Twitter social widgets (Twitter)
The Tweet button and Twitter social widgets are services for interaction with the Twitter social network, provided by Twitter Inc.
Personal data collected: Cookies and Usage data.
Place of processing: USA – https://twitter.com/privacy?lang=it
Facebook Like button and social widgets (Facebook)
The Facebook Like button and social widgets are services allowing interaction with the Facebook social network, provided by Facebook Inc.
Personal data collected: Cookies and Usage data.
Place of processing: USA – https://www.facebook.com/policy.php
Google+ +1 button and social widgets (Google)
The Google+ +1 button and social widgets are services allowing interaction with the Google+ social network, provided by Google Inc.
Personal data collected: Cookies and Usage data.
Place of processing: USA – Privacy Policy
Instagram widget (Instagram, Inc.)
Instagram is an image visualization service provided by Instagram, Inc. that allows this Application to integrate such content within its pages.
Personal data collected: Cookies and Usage data.
Place of processing: United States – https://help.instagram.com/519522125107875
Holidaycheck / Widget
Holidaycheck stores cookies (if used on this website). We have no influence on the cookies stored by Holidaycheck. For more information on this, please visit:
For more information about these cookies, please visit the provider’s website: http://www.holidaycheck.de/
Tripadvisor / Widget
Tripadvisor stores cookies (if used on this website). We have no influence on the cookies stored by Tripadvisor. For more information about these cookies, please visit the provider’s website: http://www.tripadvisor.com/
CONTACTING THE USER, CHAT, AND FEEDBACK
Mailing List or Newsletter
By subscribing to the mailing list or newsletter, the User’s email address is automatically added to a contact list to which email messages containing information, including commercial and promotional information, relating to this site and/or portal may be sent. The User’s email address may also be added to this list as a result of registering for the site form or after making a purchase.
Personal data collected: Email.
Address management and email sending
These services allow us to manage a database of email contacts, phone numbers, or any other contact information used to communicate with the User. These services may also collect data relating to the date and time the messages are viewed by the User, as well as the User’s interaction with them, such as information on clicks on links included in messages.
MailChimp (The Rocket Science Group, LLC.)
MailChimp is an address management and email sending service provided by The Rocket Science Group, LLC.
Personal Data collected: email.
Place of processing: USA – Privacy Policy – Use of API
Privacy Shield participant.
STATISTICS
The services contained in this section allow the Data Controller to monitor and analyze traffic data and are used to track User behavior.
Google Analytics (Google)
Google Analytics is a web analytics service provided by Google Inc. (“Google”). Google uses the Personal Data collected to track and examine the use of this Application, compile reports, and share them with other Google services. Google may use the Personal Data to contextualize and personalize the ads of its own advertising network.
Personal data collected: Cookies and Usage data.
Place of processing: USA – https://policies.google.com/privacy
Disable Google Analytics
Download the Google Analytics Opt-Out Tool: Opt out
Facebook Ads Conversion Tracking (Facebook)
Facebook Ads Conversion Tracking is a statistics service provided by Facebook, Inc. that connects data from the Facebook advertising network with actions performed on the website/portal. Personal data collected:
Cookies and Usage data.
Place of processing: USA – https://www.facebook.com/about/privacy/
Google AdWords Conversion Tracking (Google)
Google AdWords Conversion Tracking is a statistics service provided by Google, Inc. that connects data from the Google AdWords advertising network with actions performed on the website/portal.
Personal data collected: Cookies and Usage Data.
Place of processing: USA – http://www.google.com/intl/it/policies/privacy
Google-Tag-Manager
This website uses Google Tag Manager. Google Tag Manager is a solution that allows marketers to manage website tags through a single interface. The Tag Manager tool itself (which implements the tags) is a cookie-free domain and does not collect personally identifiable information. The tool activates other tags that may collect data. If opted out at the domain or cookie level, all tracking tags implemented with Google Tag Manager will still be affected.
Bing Universal Event Tracking (UET)
Our website uses Bing Ads technology to collect and store data, from which profiles are created using pseudonyms. This is a service provided by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA.
This service allows us to track user activity on our website when users reach our website through Bing Ads.
If you reach our website through this type of ad, a cookie will be placed on your computer. A Bing UET tag has been integrated into our website. This tag uses code that, in conjunction with cookies, stores certain non-identifiable data about website use. This includes, among other things, the time spent on the website, which areas of the website were visited, and which ads brought users to the website. Identity information is not collected. https://privacy.microsoft.com/en-us/privacystatement
Heat mapping
Heat mapping services are used to identify which areas of a p
Pages are subject to the movement of the cursor or mouse click in order to detect which ones attract the most interest. These services allow us to monitor and analyze traffic data and track User behavior.
REMARKETING & BEHAVIORAL TARGETING
These services allow the site/portal and its partners to communicate, optimize, and serve advertising based on the User’s past use of the site/portal. This activity is carried out by tracking Usage Data and using Cookies, information that is transferred to the partners involved in the remarketing and behavioral targeting activity.
AdWords Remarketing (Google)
AdWords Remarketing is a Remarketing and Behavioral Targeting service provided by Google Inc. that connects the activity of this Application with the AdWords advertising network and the DoubleClick Cookie.
Personal data collected: Cookies and Usage data.
Place of processing: USA – http://www.google.com/intl/it/policies/privacy
Facebook Remarketing (Facebook, Inc.)
Facebook Remarketing is a remarketing and behavioral targeting service provided by Facebook, Inc. that connects the activity of this Application with the Facebook advertising network.
Personal data collected: Cookies and Usage data.
Place of processing: USA – https://www.facebook.com/policy.php
VIEWING CONTENT FROM EXTERNAL PLATFORMS
These services allow you to view content hosted on external platforms directly from the pages of the site/portal and interact with them. If a service of this type is installed, it is possible that, even if Users do not use the service, it may collect traffic data relating to the pages on which it is installed.
YouTube Video Widget (Google)
Youtube is a video content viewing service provided by Google Inc. that allows this site to integrate such content within its pages.
Personal data collected: Cookies and Usage data.
Place of processing: USA – https://www.youtube.com/static?template=privacy_guidelines
Vimeo Video Widget (Vimeo, LLC)
Vimeo is a video content viewing service provided by Vimeo, LLC that allows this site to integrate such content within its pages.
Personal data collected: Cookies and Usage data.
Place of processing: USA – http://vimeo.com/privacy
Google Maps Widget (Google Inc.)
Google Maps is a map viewing service provided by Google Inc. that allows this application to integrate such content within its pages.
Personal data collected: Cookies and Usage data.
Privacy Shield participant.
Place of processing: USA – https://policies.google.com/privacy
REGISTRATION AND AUTHENTICATION
By registering or authenticating, the User allows the website/portal to identify them and provide them with access to dedicated services. Depending on what is specified below, registration and authentication services may be provided with the assistance of third parties. If this occurs, this application may access some Data stored by the third-party service used for registration or identification.
Direct Registration
The User registers by completing the registration form on the website and providing their Personal Data directly to the website/portal.
Personal data collected: first name*, last name*, email address*, telephone number/fax number*, address, city, zip code, country, number of adults, number of children/children’s age, privacy policy acceptance*, additional requests field (used for free text).
* Mandatory fields used to contact you.
Purpose of Data Collection
The aforementioned data controller collects the personal data of its users necessary to authorize, enable, and customize access to the various areas and related content of the Company’s website/portal. Furthermore, the aforementioned data controller acquires the data necessary to fulfill the contractual obligations undertaken towards customers and arising from booking transactions. Fulfilling these obligations necessarily requires that Ganischger Srl’s operational and commercial staff, as well as employees of third-party service providers, have access to such data. The aforementioned data controller uses the personal data collected online to offer products and services, control the authorized access system to monitor data security, and evaluate job offers submitted by candidates (CVs). Only upon specific request from the interested party, via an online registration form, the aforementioned data controller submits commercial offers and promotes marketing initiatives through its own newsletter.
The aforementioned data controller, as the “Data Controller,” hereby informs you that the data in question will be processed and used exclusively for the purposes outlined in this Privacy Policy.
The personal data collected by completing the forms on the aforementioned data controller’s website/web portal are processed for the following purposes:
to contact you upon your request to provide you with the specific information and assistance you require or for which you have requested our assistance;
with your express consent, to send you commercial information and for marketing purposes, both by automated means (e.g., email, fax, SMS, MMS, etc.) and non-automated means (e.g., regular mail, telephone with an operator, etc.) regarding the products and services of companies and/or commercial partners;
with your express consent, to carry out, using electronic tools, profiling activities, purchasing decision analysis, and market research for the purpose of improving the service offering and commercial information, tailoring them more closely to your interests.
This policy may be supplemented by additional information provided upon request for specific services.
Communication and/or dissemination of personal data
Personal data will be accessible to the bodies and employees of the aforementioned data controller, formally appointed as Data Processors or Data Processors. The use and disclosure of personal data by external individuals and organizations acting on behalf of the aforementioned data controller are governed by contracts that provide an adequate level of personal data protection. These individuals are appointed as External Processors. Users’ personal data will be used and disclosed by the aforementioned data controller exclusively to individuals and organizations working on its behalf, in accordance with this Privacy Policy and as explicitly provided by applicable law. The aforementioned data controller also manages the information contained on its website/web portal in collaboration with other service providers and web agencies, from which it may receive personal data relating to users of such information. These online collaborations are governed by specific contracts that require an adequate level of protection for the personal data processed. In certain other cases, the aforementioned data controller may also be required to release the personal data of users of its website/web portal, in fulfillment of contractual obligations, in compliance with applicable legislation, or to fulfill the data subject’s request for services. This release of information may occur in the following cases:
when online users have authorized the release of information;
when the aforementioned data controller needs to disclose user information to offer services and fulfill an online user’s request;
when the aforementioned data controller needs to disclose information to its partners who provide services to online users;
when the aforementioned data controller is required, by order of judicial authorities, to release information regarding users, or in accordance with a local or international law, regulation, or mandate.
Furthermore, other circumstances may arise, for example, if the aforementioned data controller decides, for commercial reasons, to carry out a sale, merger, or capital acquisition. As part of such reorganizations, personal data may be shared with current or potential acquirers. In such circumstances, the aforementioned data controller will obtain written guarantees that the personal data will be processed with an adequate level of protection and, in any case, in compliance with applicable legislation. Except where explicitly permitted by law or provided for in this Privacy Policy, personal data will not be disclosed or shared without the consent of the user concerned. The aforementioned data controller will not transfer, whether for a fee or free of charge, the personal data of its website users to unauthorized third parties.
Personal data protection
In accordance with the principle of data minimization established in art. 5 GDPR, the aforementioned data controller guarantees that processing using electronic means is carried out by minimizing the use of personal data and identifying data, limiting their use to cases where they are strictly necessary to achieve the purposes for which they were collected. The aforementioned data controller guarantees
It also requires the adoption and observance of specific security measures to prevent data loss, any unlawful or incorrect use, and unauthorized access. User data will be retained by the data controller for a maximum of two years from the last interaction with the user and until the data subject requests its deletion, including data whose retention is unnecessary for the purposes for which it was collected, in compliance with the rights established by Articles 15-21 of the GDPR and to be implemented in accordance with the procedures set out in the following section “Your Rights.” It is the responsibility of each individual user to ensure and verify ownership and safekeeping of their passwords and related access codes to web resources.
Consent to the processing of personal data
The aforementioned data controller processes the data of its users/customers exclusively with their consent. However, if the user does not consent to data processing or requests the deletion of their data, they will not be able to access the reserved areas of the Company’s website/portal.
Optional Data Provision
Except as specified for browsing data, the user has the right to decide whether or not to provide the personal data contained in the request and/or registration forms on the website/web portal of the aforementioned data controller. Failure to provide such data may make it impossible to obtain what has been requested. For the sake of completeness, it should be noted that in some cases (not covered by the ordinary management of this website), the Authority may request information pursuant to Article 58 of the GDPR, for the purposes of monitoring the processing of personal data. In these cases, compliance is mandatory under penalty of administrative sanctions.
Right to access personal data and other rights
Users of the website/web portal may always contact the Data Controller to exercise their rights as set forth in Articles 15 to 21 of the GDPR, according to which:
The data subject has the right to obtain confirmation as to whether or not personal data concerning him or her are being processed, and, where that is the case, access to the personal data and the following information:
the purposes of the processing;
the categories of personal data concerned;
the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organizations;
where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;
the existence of the data subject’s right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning him or her, or to object to such processing;
the right to lodge a complaint with a supervisory authority;
where the data is not collected from the data subject, all available information regarding its source;
the existence of automated decision-making, including profiling, referred to in Article 22, paragraphs 1 and 4 of the GDPR, and, at least in such cases, meaningful information about the logic involved, as well as the significance and envisaged consequences of such processing for the data subject.
The data subject has the right to obtain:
updating, rectification, or, where interested therein, integration of the data
the erasure of data concerning him or her for the reasons specifically set out in Article 17 of the GDPR (right to be forgotten), the anonymization, or blocking of data processed unlawfully, including data whose retention is unnecessary for the purposes for which the data were or subsequently processed;
If the personal data has been made public and the data controller is obliged to delete it at the data subject’s request, the data controller shall take reasonable steps, including technical measures, to inform those processing the personal data that the data subject has requested the deletion of any links to, or copy or replication of, that personal data, unless this proves impossible or involves a manifestly disproportionate effort compared with the right being protected.
The data subject has the right to object, pursuant to Art. 21 GDPR, in whole or in part:
on grounds relating to his or her particular situation, to the processing of personal data concerning him or her, even if pertinent to the purpose of the collection. The data controller shall no longer process the personal data unless the controller demonstrates compelling legitimate grounds for the processing that override the interests, rights and freedoms of the data subject, or for the establishment, exercise or defence of legal claims.
Defending a right in court.
To the processing of personal data concerning him/her for the purpose of sending advertising or direct sales materials or for market research or commercial communications.
In accordance with these provisions, and in addition to the other rights specified herein, the aforementioned data controller provides users of its website/web portal with the following options:
No collection of personal data: Users may choose not to provide personal data online to the aforementioned data controller by deciding not to enter or provide personal information in registration forms or web form fields, or by not using any personalized services available on the Company’s website/portal. Some of the website/portal’s content and/or services are offered exclusively to users who provide personal information or use personalized services.
Limitations on the use and disclosure of personal data for other purposes:
Access to certain content and/or service sections of the aforementioned data controller’s website may require the user’s consent to use and disclose personal data for the purpose of expanding the contact list and/or identifying and offering additional services and promotions deemed of interest to the user. Users may limit the further processing of such information by reviewing or selecting the appropriate options when entering the data.
Furthermore, the information provided after initial registration may be modified or deleted by changing the settings previously entered in the registration form on the aforementioned data controller’s website/web portal, by accessing the “Newsletter” section on the homepage. Users may also access their personal data, provided and stored online, and, where permitted, update and modify their personal data online.
Cookies
Cookie technology is used to obtain information about your experience on the website/web portal and to enable the functioning of certain services that require the user’s navigation through various pages to be identified.
What are cookies?
A “cookie” is information sent from a server to a browser, allowing the server to collect information from the browser and vice versa. The cookie will help the website/web portal recognize your device when you visit it again. Cookies serve many functions. For example, they can help us remember your username and preferences, analyze the performance of our website, or even allow us to recommend content we think may be of interest to you.
Our cookies are usually anonymous and cannot be linked to your personal data. First-party cookies are associated with the domain name of the page you are visiting and allow you to be identified by cross-referencing them with our database. They can only be assigned upon explicit user request and are used to immediately identify you for access to restricted areas of the website, without having to manually enter your login and password. The user’s identity is never directly included in the cookie and cannot be intercepted.
Every time you access the website/web portal, regardless of the presence or absence of a cookie, we record the browser type, operating system, and host, along with the visitor’s source URL, as well as information about the requested page. This data can then be used in aggregate and anonymous form to perform statistical analyses on website usage.
Types of Cookies
The cookies used on the website/web portal are divided into 4 types:
Technical Cookies
Performance and Functionality Cookies
Statistical Cookies
Profiling Cookies
Technical Cookies
Necessary for navigation within the website/web portal and the use of some of its features (e.g., timing the display of certain pages in pop-up mode, etc.).
Performance and Functionality Cookies
Performance cookies collect anonymous information on the pages visited by users. They are used to track the most popular pages and are useful for improving links between pages and determining the cause of possible error messages. Functionality cookies also store the choices made by the user in order to improve navigation and your online experience.
Statistical Cookies
Provided and managed by third parties to statistically analyze access to the website/web portal. The collection of information
The collection of information is carried out solely in anonymous and aggregate form, and no personal data of users is stored. You can decide not to use these cookies by following the information in the Purposes of Data Processing section.
Profiling Cookies
Provided and managed by third parties to generate specific advertising messages based on the browsing habits and interests of individual users. These cookies, however, do not use sensitive user data. “The storage of information in the terminal equipment of a contractor or user, or access to information already stored, is permitted only on condition that the contractor or user has given his or her consent after being informed according to the simplified procedures referred to in Article 13, paragraph 3” (Article 122, paragraph 1, of the Code). See the Purpose of Data Processing section.
Browser Settings (Article 122, paragraph 2, of the Privacy Code and Cookie Law – Directive 2009/136 EC)
Cookie functionality can be disabled via the dedicated page provided by the EDAA (European Interactive Digital Advertising Alliance) http://www.youronlinechoices.com/it/, or by adjusting the privacy settings of your browser. Notwithstanding the foregoing, please note that disabling cookies may affect the proper functioning of certain sections of the Site/portal.
Each browser manages cookies differently. To disable them, follow the instructions for your browser at www.allaboutcookies.org.
What happens to cookies that have been downloaded in the past?
We will only read or write cookies based on the preference level indicated in the cookie settings tool. Cookies existing before you changed your settings will remain on your computer, and you can remove them using your browser settings.
Can we know if our users open our emails?
Our emails may contain a “web beacon pixel” that lets us know if our emails have been read and whether links in the email have been clicked. We may use this information for various purposes, including determining which of our emails are of most interest to users and asking whether users who don’t open our emails wish to continue receiving them. The pixels will be deleted when you delete the email. From that point on, we will not be able to obtain any data, but we will retain the data already in our possession.
Changes to the Privacy Policy
The Privacy Policy of the aforementioned data controller may be updated and/or modified to incorporate and/or comply with national, EU, and international regulations, or to adapt to technological innovations. Any updates and/or changes to this Privacy Policy will be posted on this web page and made constantly visible via the hyperlink on the Company’s website/portal, so that data subjects can be fully informed about the use of their personal data provided through the website/portal of the aforementioned data controller. It is recommended that you review this Policy each time you visit the website/portal of the aforementioned data controller.
Terms and Conditions
For further information and terms, please refer to our contact details.